chore: sweep Kimi mentions from comments and notes

tests/live-config-guard.test.cjs

@@ -496,7 +496,7 @@ describe('#2665: guard watches non-root write surfaces', () => {
       // Every descriptor in the array must contribute a target. Calling one
       // named resolver instead would cover one of today's two entries and silently
       // miss tomorrow's — the same partial-enumeration defect that put
-      // KIMI_SHARE_DIR outside the scrub set, one layer over.
+      // a config-location var outside the scrub set, one layer over.
       //
       // SCOPE BOUNDARY (per round-2 Nit 7, and it bites here): this asserts one
       // target PER DESCRIPTOR and nothing about whether one target per descriptor